Cloudflare Secures AI Apps: GA & Free Discovery

Bridging the AI Security Gap

Cloudflare's announcement of AI Security for Apps reaching general availability, coupled with free AI endpoint discovery for all plans, addresses a critical and rapidly evolving threat landscape. The core innovation lies in its proactive approach to securing AI-powered applications, which present a fundamentally different attack surface than traditional web apps due to their probabilistic nature. By offering features like custom topic detection and the ability to leverage WAF rules with AI-specific signals, Cloudflare empowers organizations to enforce granular policies and mitigate risks such as prompt injection and sensitive data leakage. The free tier for endpoint discovery is particularly impactful, democratizing visibility into AI deployments and enabling even smaller businesses to start securing their AI initiatives.

The expanded collaboration with IBM and partnership with Wiz are also noteworthy, signaling a move towards a more integrated and comprehensive AI security posture management ecosystem. However, while the GA status is a positive step, the article mentions that full AI Security for Apps capabilities will be available for all plans 'soon,' implying that some advanced features might still be restricted to enterprise tiers initially. The success of custom prompt extraction will also hinge on the extensibility and accuracy of the JSONPath expressions and the forthcoming prompt-learning capabilities. Furthermore, the effectiveness of 'detection' relies heavily on the quality and comprehensiveness of Cloudflare's detection modules, which are constantly being updated to counter new attack vectors. Organizations will need to actively configure custom topics to gain the most value, requiring an understanding of their specific AI usage and risk tolerance.

Key Points

• Cloudflare's AI Security for Apps is now generally available, offering a dedicated solution for securing AI-powered applications.
• AI endpoint discovery is now free for all Cloudflare customers (Free, Pro, Business plans), providing visibility into AI deployments.
• New GA features include custom topic detection for tailored policy enforcement and expanded support for various LLM provider API formats.
• Integrations with IBM Cloud and Wiz aim to provide a unified view of AI security posture across different platforms.
• The solution leverages Cloudflare's WAF to detect and mitigate threats like prompt injection and sensitive data disclosure, combining AI signals with existing security data.

---

📖 Source: AI Security for Apps is now generally available